Repository navigation
Upgrade urllib3 2.6.3 → 2.8.0 (4 CVEs) #525
Description
Sub-issue of #519 (P1). Surfaced by the Conductor OSS CVE scan (target python-sdk).
Upgrade urllib3 2.6.3 → 2.8.0 clears:
- CVE-2026-44431 — header leak on redirect (high)
- CVE-2026-44432 — denial of service (high)
- CVE-2026-97687 — proxy TLS override (high)
- CVE-2026-97689 — proxy TLS override (high)
Activity